CVE-2012-3924

Published: Sep 16, 2012Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

The SSLVPN implementation in Cisco IOS 15.1 and 15.2, when DTLS is enabled, does not properly handle certain outbound ACL configurations, which allows remote authenticated users to cause a denial of service (device crash) via a session involving a PPP over ATM (PPPoA) interface, aka Bug ID CSCty97961.

Affected (2)

Products: Cisco: Ios

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios	Version 15.1
Cisco Ios	Version 15.2

References (4)

http://www.cisco.com/en/US/docs/ios/15_2m_and_t/release/notes/152-1TCAVS.html

Source: psirt@cisco.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/78672

Source: psirt@cisco.com

http://www.cisco.com/en/US/docs/ios/15_2m_and_t/release/notes/152-1TCAVS.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/78672

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.